Privacy policy

1. Who is responsible for your data

Hoopla Interactive Services, a partnership firm registered in India, with its registered office at 5th Floor, RMZ Spire, Silpa Gram Craft Village, HITEC City, Hyderabad 500081, Telangana, India, is responsible for the personal data described in this policy.

GSTIN: 36AAFFH5725E2ZI
Email: hello@hooplaindia.com
Telephone: +91 98667 92222

This policy is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and rules made under it.

2. Our two roles

We handle personal data in two distinct capacities, and it matters which one applies to you:

As a data fiduciary, for data you give us directly, such as when you submit our contact form or email us about business.

As a data processor, for campaign data we handle on the instructions of a client brand. Where a client brand runs a campaign through us, that brand determines why the data is collected, and we process it only to deliver the campaign under our agreement with them.

3. What data we collect

a. Website visitors. If you use our contact form we collect your name, email address, company name and the message you send. We also collect standard technical data through analytics, including IP address, browser type, device type, pages viewed and referring source.

b. Campaign participants. Where you take part in a campaign we operate for a client brand, we may collect: your name; your mobile number; your UPI ID (virtual payment address) or bank account details required to send you a reward; the qualifying action or entry you submitted, such as a code, photograph or response; your location at the level required by the campaign, such as state or district; transaction reference numbers returned by the payment provider; and, where a reward's value or the law requires it, identity information for verification and tax purposes.

We do not collect your UPI PIN, passwords, card numbers or any credential. Never share these with anyone, including anyone claiming to represent us.

c. Business contacts. Names, work email addresses, roles and correspondence of people at client and prospective client organisations.

4. Why we use it

We use personal data to: respond to business enquiries; verify eligibility for a campaign; process and disburse campaign rewards through our payment partners; detect, investigate and prevent fraudulent or duplicate claims; provide reporting to the client brand that commissioned the campaign, normally in aggregate form; meet legal, tax, audit and regulatory obligations; and improve our website and services.

5. Legal basis and consent

We process personal data on the basis of the consent you give when you enter a campaign or submit a form, for the performance of a contract, and to comply with law. Campaign entry is voluntary. Where consent is the basis, you may withdraw it at any time using the contact details in section 10, though we may be unable to process a pending reward if you do.

6. Who we share it with

We share personal data only as far as necessary, with:

Payment service providers and banks, to execute reward disbursements. These are regulated entities and receive only the data needed to make the payment, such as name, mobile number and UPI ID.

The client brand that commissioned the campaign, in line with our agreement with them and the campaign's published terms.

Service providers who support us under confidentiality obligations, such as hosting, messaging and analytics providers.

Authorities, where disclosure is required by law, regulation, court order or a lawful request from a government agency.

We do not sell personal data, and we do not share it for third party advertising.

7. Where data is stored and transferred

Data is stored on servers operated by reputable providers. Some service providers may process data outside India. Where that happens, we take reasonable steps to ensure a comparable standard of protection through contractual safeguards, and we comply with applicable restrictions on cross border transfer.

8. How long we keep it

We keep campaign participant data for as long as needed to deliver the campaign, resolve claims and meet legal, tax and audit requirements, which is normally up to eight years for financial and transaction records. Business enquiry data is retained for as long as we have an active relationship or a legitimate reason to keep it. After that, data is deleted or anonymised.

9. How we protect it

We apply reasonable technical and organisational security measures, including encryption of data in transit, access controls limiting data to staff who need it, and contractual security obligations on our providers. No system is completely secure, but we work to industry standards and review our controls regularly.

10. Your rights

Subject to applicable law, you may: ask what personal data of yours we hold and why; ask us to correct data that is inaccurate or incomplete; ask us to erase data where we no longer have a lawful reason to keep it; withdraw consent you previously gave; and nominate another person to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these, or to raise a complaint, contact our Grievance Officer:

Grievance Officer
Bhargav Lakkaraju, Founder and CEO
Hoopla Interactive Services
5th Floor, RMZ Spire, Silpa Gram Craft Village, HITEC City, Hyderabad 500081, Telangana, India
Email: hello@hooplaindia.com
Telephone: +91 98667 92222

We acknowledge requests within 48 working hours and respond within 30 days. Where a campaign was run for a client brand and that brand determines the purpose of processing, we may forward your request to them and tell you that we have done so.

11. Children

Our website and campaigns are not directed at children. We do not knowingly collect personal data of anyone under 18 without verifiable parental consent. If you believe we hold such data, contact us and we will delete it.

12. Cookies and analytics

This website uses Google Analytics to understand how visitors use the site. This sets cookies that collect information such as pages viewed, time on site and approximate location derived from IP address. This information is used in aggregate and helps us improve the site. You can block or delete cookies through your browser settings; the site will continue to function.

13. Changes to this policy

We may update this policy. The version on this page, with the "last updated" date above, is the version in force. Material changes affecting campaign participants will be reflected in campaign terms as well.